Oso Reviews

Duo Security Reviews

Oso mentions (6)

• Solution for ReBAC authz using attributes?

  I know of warrant.dev, osohq.com, and Ory Keto but I don't see that these evaluate based on attributes. Source: over 1 year ago

• Authorization Framework + Data Filtering

  Oso supports applying authorization logic at the ORM layer so that you can efficiently authorize entire data sets. For example, suppose you have millions of posts in a social media application created by thousands of users, and regular users are only authorized to view posts from their friends. It would be inefficient to fetch all of the posts and authorize them one by one. It would be much more efficient to... Source: almost 3 years ago

• Node Authorization Framework

  Oso's Node library now provides a configuration-based approach to adding role-based access control (RBAC) to your application. This new library speeds up the time it takes to build fine-grained permissions using roles and related patterns. Here are the docs + quickstart. Source: almost 3 years ago

• AuthZ: Carta’s highly scalable permissions system

  > It's crazy this still is part of the stack where there are no great solutions. Seems like a few others have come to the same conclusion :) We're working on this at Oso (https://osohq.com) - I'm the CTO. Oso is an open source framework for authorization. Policies can reference application directly, so any authorization decisions can be made dynamically based on the data. And your data doesn't need to leave your... - Source: Hacker News / about 3 years ago

• The basics of role-based access control (RBAC) in SQLAlchemy

  To celebrate a new release of Oso, our open-source authorization library, this blog post demonstrates a few ways of modeling role-based access control in Python and SQLAlchemy. It has complex examples to provide you with the building blocks for adding RBAC to your app and are written in a multi-tenant production system. - Source: dev.to / about 3 years ago

Duo Security mentions (31)

• A list of SaaS, PaaS and IaaS offerings that have free tiers of interest to devops and infradev

  Duo.com — Two-factor authentication (2FA) for website or app. Free for ten users, all authentication methods, unlimited, integrations, hardware tokens. - Source: dev.to / 5 months ago

• Additional computer log-in protection

  You could use Duo - https://duo.com/. It can be set to require MFA when logging in locally or only when logging in via RDP (or both). It's free for up to 10 users. Source: about 1 year ago

• [Data-Mining] Upcoming tunnels from the May 23 patch

  A quick google tells me that Duo is a 2FA service from Cisco. Maybe that's what Anet is using to manage the 2FA in the launcher behind the scenes? Source: about 1 year ago

• what do you use for ssh brute force protection: fail2ban or sshguard ? or something else ? for ubuntu and fedora

  I have Duo (https://duo.com) enabled on my internet facing SSH server. It sits behind sslh on port 443 and uses public key authentication only. Source: about 1 year ago

• Duo MFA with Serverless API Gateway for authentication

  Our organization uses Duo, which is an MFA tool that competes with Okta. I created a serverless application with API Gateway and Lambda that gives users access to Salesforce resources where they can directly update records. This was a workaround for getting around Salesforce community clouds expensive community licenses. Source: over 1 year ago